The SDK has substantial documentation, a correctly linked organization-owned repository, and no install-time scripts. Clarify the license mismatch and tighten workflow pinning before relying on it for long-lived projects.
57%
Total Score
50
100
72
75
The repository recorded 0 commits and 0 active maintainers in the last three months, despite the package's strong earlier release cadence. This is the clearest current abandonment warning.
The artifact includes license files, but the manifest declares MIT while the detected artifact license is Apache-2.0. That mismatch needs clarification even though the release is not unlicensed.
The package has 187 releases over roughly three and a half years with a median interval of about 2 days, showing strong historical release activity. However, there were no releases in the last 12 months, so current maintenance is a concern.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a generated SDK, but it provides little evidence of active support.
The repository has 0 stars and 5 forks, indicating limited visible adoption. Popularity is only supporting evidence, so this modestly reduces confidence rather than determining the health verdict.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version ^0.12.1 | — | — |
brick/date-time Version ^0.7.0 | — | — |
galbar/jsonpath Version ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
speakeasy/serializer Version ^4.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.